LeakySensey: Possible access to exposed LeakySensey transaction/compromise log endpoint

Arnold Chan@slaz

•updated Sep 17, 2026•0•0•2

This rule detects HTTP requests directed at suspicious URI patterns associated with 'LeakySensey' logs. It specifically monitors for attempts to access transaction or compromise log endpoints, which could indicate an attacker attempting to enumerate leaked data or verify compromised credentials from an exposed log repository.